Job Purpose
The Security Configuration Analyst supports designing, creation, review, and continuous improvement of Security Configuration Documents (SCDs) across enterprise systems, applications, and infrastructure. This role assists in documenting secure configuration baselines, validating configurations, and ensuring alignment with industry standards, regulatory requirements and BFL security policies, reducing risk and enhancing system hardening.
Duties and Responsibilities
1.SCD Documentation Support
Assist in developing Security Configuration Documents (SCDs) for - Operating systems, Network devices, Cloud settings (Azure, AWS, GCP), Databases, Middleware, and Applications
Followed baseline configurations based on - CIS Benchmarks, NIST guidelines and OEM best practices
Ensure Transparent, structured, and standardized documentation of SCDs
2.Review Validation
Support periodic SCD Reviews/Audits
Track and ensure closure within the TAT
3.Governance Compliance Support
Ensure SCDs align with - BFL security frameworks Regulatory requirements




Support internal and external audits related to SCDs
Track and manage exceptions and risk acceptances
4.Continuous Improvement
Regularly review and update SCDs to reflect - Emerging threats, Vulnerabilities and Technology changes
Incorporate lessons learned from - Security incidents, VAPT and audits
5.Collaboration Stakeholder Engagement
Work with IT Teams (IT Infrastructure/CoE, DevOps/Cloud teams, Application Support, InfoSec Compliance, Data Privacy, SOC, Endpoint Security, Network, Database and Middleware etc.
Work with IT Compliance
Work with Corporate Audit
Ensure closure of regulatory observations and avoid recurrence through continual improvements
6.Automation Documentation
Support automation of SCD enforcement using - Configuration Management and various Security Tools
Maintain central repository of SCDs and templates

Key Decisions / Dimensions
Accuracy and periodic updates of the invento

📌 Domain Manager Pune
🏢 Bajaj Finance
📍 Pune